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DETAILED ACTION 

1 . This is in response to the arguments filed on 03/02/2009. 

2. Claims 1-13, and 15-21 are pending in the application. 

3. Claims 16-19 have been withdrawn. 

4. Claims 1-13, 15, and 20-21 have been rejected. 

Response to Amendment 

5. The examiner withdraws the specification objection as the claim has been 
cancelled. 

6. The examiner withdraws the 101 rejection as the claim has been cancelled. 

7. The examiner approves cancellation of claim 14. 

Response to Arguments 

8. Applicant's arguments filed on 03/02/2009 have been fully considered but they 
are not persuasive. 

Regarding independent claim 1 , applicant argues that Schwartz does not disclose, 
"determining from the data storage device identifiers whether the data storage device 
supports the security features and is locked". Examiner respectfully disagrees. Indeed, 
Schwartz teaches during the initial booting of the power on test process the identifier 
(password) of the memory has been used to determine whether the BIOS proceeds to 
boot or in a locked configuration (col. 3, lines 1-14). This is exactly the same teaching of 
applicant's invention (page 12, lines 17-21). Additionally, he also teaches that the 
identifier of the motherboard plays a role to determine the device is locked (col. 4, lines 
1 -1 2). Therefore, it teaches that from the identifier of the device, it determines whether it 
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is locked. The identifiers is the serial number, password or other type of identifying 
number of the hard drive which assures the device is secure and authenticated (col. 
3, lines 1 5-1 8, col. 4, lines 50-65). This simply emphasis the teaching of the claim 
limitation that determining from the device identifier whether the device supports the 
security features. Schwartz discloses the data storage device is returning from a 
powered off state or hardware reset (col. 1 , lines 51-60, col. 3, lines 5-65, col. 4, lines 
12-25). This discloses the claim limitation, "in response to determination that the data 
storage device supports the security features and is locked, determining whether the 
data storage device is returning from a powered off state or a hardware reset". Thus the 
argument is traversed and sustains the claim rejection. 

Regarding independent claim 20, Schwartz discloses the claim limitation "in response to 
determining that the data storage device is locked, determining whether the data 
storage device is returning from a sleep state" (col. 1, lines 51-60, col. 3, lines 5-65, col. 
4, lines 12-25). Therefore, all the arguments have been traversed. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 
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10. Claims 1-13, 15, and 20-21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Schwartz (US patent 7,100,036) in view of Morisawa et al hereafter 
Morisawa (US Patent 5,537,544). 

11. As per claim 1 , and 1 5 Schwartz discloses a method, and storage medium 
comprising: reading from each of the data storage devices within the computer one or 
more data storage device identifiers; determining from the data storage device 
identifiers whether the data storage device supports the security features and is locked; 
in response to determining that the data storage device supports the security features 
and is locked, determining whether the data storage device is returning from a powered 
off state or a hardware reset (col. 1, lines 51-60, col. Col. 3, lines 1-36, lines 46-67, col. 
4, lines 1-40, lines 50-65). Although, Schwartz discloses the data storage device is 
returning from the locked and powered off state. He does not expressly discloses in 
response to determining that the data storage device is locked and returning from a 
powered off state or a hardware reset, receiving from a user a password for unlocking 
the data storage device; in response to receiving the password, determining whether 
the received password is the security password; and in response to the received 
password being the security password, unlocking the data storage device and thereby 
allowing access to data stored on the data storage device. However, in the same field of 
endeavor, Morisawa discloses in response to determining that the data storage device 
supports the security features and is locked, determining whether the data storage 
device is returning from a powered off state or a hardware reset; in response to 
determining that the data storage device is locked and returning from a powered off 
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state or a hardware reset, receiving from a user a password for unlocking the data 
storage device; in response to receiving the password, determining whether the 
received password is the security password; and in response to the received password 
being the security password, unlocking the data storage device and thereby allowing 
access to data stored on the data storage device (col. 3, lines 25-67, col. 4, lines 1-10, 
col. 6, lines 3-39, col. 8, lines 1-40, col. 17, lines 30-55). 

Accordingly, it would been obvious to one of ordinary skill in the network security art at 
the time of invention was made to have incorporated Morisawa's teachings of receiving 
the password for unlocking the data storage device with the teachings of Schwartz, for 
the purpose of suitably using storage device identifier to determine that the storage 
device status locked and supported the security features. 

12. As per claim 2, Schwartz discloses the method wherein the method is 
implemented during a power on test procedure of the computer hosting the data storage 
devices (col. Col. 3, lines 1-36, lines 46-67, col. 4, lines 1-40). 

13. As per claim 3, Schwartz discloses in response to the received password not 
being the security password, determining whether limited access should be provided to 
each locked data storage device (col. 1, lines 51-60, col. Col. 3, lines 1-36, lines 46-67. 
Schwartz does not disclose wherein; in response to determining that limited access 
should be provided, setting a bit corresponding to each locked data storage device to 
exclude the locked data storage device from detection verification during a power on 
test procedure; and in response to determining that limited access should not be 
provided to each locked data storage device, isolating each locked data storage device 
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from the operating system. However, Morisawa discloses wherein; in response to 
determining that limited access should be provided, setting a bit corresponding to each 
locked data storage device to exclude the locked data storage device from detection 
verification during a power on test procedure; and in response to determining that 
limited access should not be provided to each locked data storage device, isolating 
each locked data storage device from the operating system (col. 4, lines 1-10, col. 6, 
lines 3-39, col. 8, lines 1-40, col. 17, lines 30-55). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 3. 

14. As per claim 4, Schwartz discloses the method wherein limited access comprises 
prohibiting reading from or writing to the locked data storage device (Col. 3, lines 1-36, 
lines 46-67, col. 4, lines 1-40). 

15. As per claim 5, Schwartz discloses the method wherein in response to the 
received password being the security password, determining whether a data storage 
device returning from a sleep state should be unlocked without requiring a user to enter 
a password (col. 1, lines 51-60, col. Col. 3, lines 1-36, lines 46-67). Schwartz does not 
disclose in response to determining that the data storage device should be unlocked 
without requiring a user to enter a password, storing the security password within a 
memory located outside the data storage device. However, Morisawa discloses in 
response to determining that the data storage device should be unlocked without 
requiring a user to enter a password, storing the security password within a memory 
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located outside the data storage device (col. 4, lines 1-10, col. 6, lines 3-39, col. 8, lines 
1-40, col. 17, lines 30-55). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 5. 

16. As per claim 6, Schwartz discloses the method wherein in response to 
determining that the data storage device is locked, determining whether the data 
storage device is returning from a powered off sleep state; in response to the data 
storage device being locked and returning from a powered off sleep state, determining 
whether the data storage device was unlocked prior to the sleep state; in response to 
determining that the data storage device was unlocked prior to the sleep state, 
determining whether a data storage device returning from a sleep state should be 
unlocked without requiring a user to enter a password (col. 1, lines 51-60, col. Col. 3, 
lines 1-36, lines 46-67). Schwartz does not disclose in response to determining that the 
data storage device should be unlocked without requiring a user to enter a password, 
retrieving the security password from the memory and utilizing the security password to 
unlock the data storage device. However, Morisawa discloses in response to 
determining that the data storage device should be unlocked without requiring a user to 
enter a password, retrieving the security password from the memory and utilizing the 
security password to unlock the data storage device (col. 4, lines 1-10, col. 6, lines 3-39, 
col. 8, lines 1-40, col. 17, lines 30-55). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 6. 
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17. As per claim 7, Schwartz discloses the method wherein the security password is 
stored within the memory in an encrypted format (col. 1, lines 51-60, col. Col. 3, lines 1- 
36, lines 46-67). 

18. As per claim 8, Schwartz discloses the method wherein in response to 
determining that the data storage device should be unlocked after returning from a 
sleep state by requiring a user to enter a password, receiving the security password 
from a user and utilizing the security password to unlock the 19. As per claim 9, 
Schwartz discloses the method wherein in response to determining that the data 
storage device is unlocked, determining whether a security password has been 
enabled; and in response to determining that the data storage device is unlocked and 
that no security password is enabled for the data storage device, disabling, until a next 
power cycle, the security features that enable security passwords (col. 1 , lines 51-60, 
col. Col. 3, lines 1-36, lines 46-67). 

20. As per claim 1 0, Schwartz discloses the method wherein in response to the data 
storage device being locked and returning from a powered off state or a hardware reset, 
determining whether a backup password may be used to unlock the data storage 
device; in response to determining that a backup password may be used, determining 
whether a request to enter a backup password has been received (Col. 3, lines 1-36, 
lines 46-67, col. 4, lines 1-40, lines 50-65); in response to receiving a request to enter a 
backup password, receiving from a user a password for unlocking the data storage 
device; and in response to the received password being the backup password, 
unlocking the data storage device and thereby allowing access to data stored on the 
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data storage device (col. 1, lines 51-60, col. Col. 3, lines 1-36, lines 46-67). 

21 . As per claim 1 1 , Schwartz discloses the method wherein in response to the 
received password being the backup password, determining whether a maximum 
security is supported by the security features; and in response to the received password 
being the backup password and the maximum security being supported, erasing the 
data storage device before unlocking the data storage device (Col. 3, lines 1-36, lines 
46-67, col. 4, lines 1-40, lines 50-65). 

22. As per claim 12, Schwartz discloses the method in response to determining that 
the password is not the security password, determining whether the password entry 
attempt counter is equal to zero (Col. 3, lines 1-36, lines 46-67, col. 4, lines 1-40, lines 
50-65); in response to the password entry attempt counter being greater than zero, 
decrementing the password entry attempt counter by one and again receiving a 
password from a user; and in response to the password entry attempt counter equaling 
zero, prohibiting additional password entries until a next power cycle and displaying a 
message that the data storage device remains locked (col. 1, lines 51-60, col. Col. 3, 
lines 1-36, lines 46-67). 

23. As per claim 13, Schwartz discloses the method wherein executing a setup utility 
within the basic input/output system operative to control one or more functions for 
manipulating at least one of a security password and a backup password for a data 
storage device supporting the security features wherein the functions are accessed by 
one of entering the security password when prompted by the setup utility and selecting 
the data storage device in the setup utility when said data storage device is unlocked 
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(Col. 3, lines 1-36, lines 46-67, col. 4, lines 1-40, lines 50-65). 

24. As per claim 20, Schwartz discloses a method comprising: in response to 
determining that the data storage device is locked, determining whether the data 
storage device is returning from a sleep state; in response to the data storage device 
being locked and returning from a sleep state, determining whether the data storage 
device was unlocked prior to the sleep state; and in response to determining that the 
data storage device was unlocked prior to the sleep state, retrieving the security 
password from the memory and utilizing the security password to unlock the data 
storage device (col. 1, lines 51-60, col. Col. 3, lines 1-36, lines 46-67, col. 4, lines 1-40, 
lines 50-65). Although, Schwartz discloses the data storage device retrieving the 
security password from memory. He does not expressly discloses storing a security 
password within a memory located within the computer, but outside the data storage 
device; in response to determining that the data storage device was unlocked prior to 
the sleep state, retrieving the security password from the memory and utilizing the 
security password to unlock the data storage device (col. 3, lines 25-67, col. 4, lines 1- 
10, col. 6, lines 3-39, col. 8, lines 1-40, col. 17, lines 30-55). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 20. 

25. As per claim 21 , Schwartz discloses the method wherein the security password is 
stored within the memory in an encrypted format (Col. 3, lines 1-36, lines 46-67, col. 4, 
lines 1-40, lines 50-65). 
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Conclusion 



24. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). A shortened statutory period for reply to this final 
action is set to expire THREE MONTHS from the mailing date of this action. In the 
event a first reply is filed within TWO MONTHS of the mailing date of this final action 
and the advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on the date 
the advisory action is mailed, and any extension fee pursuant to 37 CFR 1 .136(a) will be 
calculated from the mailing date of the advisory action. In no event, however, will the 
statutory period for reply expire later than SIX MONTHS from the mailing date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mohammad w. Reza whose telephone number is 571- 

272- 6590. The examiner can normally be reached on M-F (9:00-5:00). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, moazzami nasser g can be reached on (571)272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 

273- 8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
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information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 

/Nasser G Moazzami/ /Mohammad W Reza/ 

Supervisory Patent Examiner, Art Unit 2436 Examiner, Art Unit 2436 



